Computer Services Access SecurityNetwork Services Account Information

Introduction

This web page to provides information regarding the Network Services section of the
security document sent regularly via Email to those individuals responsible for review access security.
This includes an explanation, example listing, definitions, and action recommendations.

Explanation

The Network Services Accounts listed in the document you received were linked to you in one of two ways:

Department -- thru searching multiple computer and database systems such as CWIS,
Human Resources, and Computer User Tracking System, each account is linked to a group or department. If
you received this type of security document then you have been identified as the main contact for this
group or department.

Responsible Account Holder -- some non-student computer accounts are created without any
record within the HR system. Other special departmental accounts are also created as needed. When this
occurs an existing computer account holder, usually a permanent full-time employee of the university,
is identified as responsible for the account. If you received this type of security document then this
indicates that you have been designated as the responsible account holder for the accounts listed in
the document.

You may find an account in the list for someone who no longer works for your department but may continue to work
for the university in another department. Please read the When to Take Action
section below to determine when concern/contact is warranted.

For department related security documents the Network Group is found labeled as "Group:". In the example
found below the group name is ACCOUNT as seen in the label (Group: ACCOUNT).

Example Listing

(Group: ACCOUNT)

Network Services Section

Account Information

Login Account

Name

Expires

Last Access

*Services

doejane

Doe, Jane

No

Not Used

C+

smitjohn

Smith, John M

12/01/07

7/31/05

C+,T+,M,R

browbill

Brown, Bill

No

7/31/05

C+,A+,F,M,L,R

Heading Definitions

Network Account

The string of characters or numbers (normally 8 or less) utilized to login to various computer services.
In the example above doejane, smitjohn
and browbill are the network account entries.

Name

The full name identified with this network account.

Expires

The date listed indicates when one or more of the network services for the account will expire and be disabled.
In the example above the first and last accounts, doejane and browbill, have no expiration date set. The second account,
smitjohn, expires December 1st, 2004.

The account holder and responsible account holder, if applicable, will receive an Email at both 30 days and 15 days
prior to the disable of the account.

Please note: all network services may NOT expire on the same day -- the date
shown is the closest.

Last Access

Dates are available to indicate when a service or computer was last accessed. This date shows the most recent access
date from all Services listed for the account. In the example above the first
account has not been accessed according to our records and, consequently, Not Used
is listed. The second and third accounts were last accessed July 31st, 2002.

(Note: Last Access Dates for CWIS[C],
TAS[T], and Remote/Modem Access[R]
have been collected since the summer of 2000. FS Tools[F] access dates were first
collected in the summer of 2002. Email[M] access dates were first collected in
October 2003. We are currently unable to collect the Last Access Date for the
Calendar[L] service.)

Services

This column attempts to identify the computer services and/or systems the network account can access. They are
identified with one character codes. The possible computer services are as follows:

C = CWIS

Indicates the account has access to the CWIS Unix system. Almost everyone who has an ISU network account has
access to CWIS, even students. Therefore this access should not generally be a concern. However, the account may
have access to restricted departmental files (+). CWIS provides many services including web services for personal
and departmental publishing along with some file sharing.

More information on setting up your Y: Drive is available in our
Knowledge Base
or you may contact the Help Desk at 282-HELP for assistance.

Indicates the account has access to the TAS Share directory service on the CWIS Unix system for departmental
file sharing, storage, and backup.

Every account having access to CWIS has access to TAS automatically and can map a drive through TAS. However,
if TAS is listed as an available service for an account, this indicates the account has full access to the TAS Share
of the department or group reported.

More information on setting up your Y: Drive is available in our
Knowledge Base
or you may contact the Help Desk at 282-HELP for assistance.

Indicates the account has access to ISU Email services for sending and receiving Email. Again, nearly all
university personnel have an Email account.

L = Calendar

Indicates the account has access to the ISU MyCalendar service for scheduling personal and group meetings along
with resources such as a conference room. Tasks can also be managed with this service. PDA syncronization is also
provided. This service is available to all university personnel and students upon request through the Help Desk.

Indicates the account has access to most ISU services from home via modem including Email and internet access.
This service is also provided as a service to most university personnel.

Note: The modem pool for faculty and staff is separate from the modem pool provided students.

W = Wireless (also DHCP)

Indicates the account probably has access to
the ISU wireless network through the use of a wireless network device such as a notebook or PDA. This may also indicate
in a few situation that the account is utilized on a standard hardwired computer workstation utilizing DHCP services to
receive a dynamic IP address.

Wireless network connectivity is provided as a service to university personnel as well as students who have paid for
a full computer account.

"+" (plus)

Indicates the account has access to shared departmental files.

(Note: This information is not applicable for the Responsible Account Holder document.)

If CWIS access is listed (C+)
the account has access to the departmental web documents. Probably only your web developers should have access to
these files. File access is normally provided via a folder on the Y: Drive.

More information on setting up your Y: Drive is available in our
Knowledge Base
or you may contact the Help Desk at 282-HELP for assistance.

If ADWin access is listed (A+) the
account has access to a shared application space on a Windows 2000 server.

If TAS access is listed (T+) the account
has access to the departmental shared files on CWIS. Usually departmental documents are maintained on this system for sharing
within the department in addition to central storage and backup. Most often, a folder on the Y: Drive is utilized for
accessing this service. (See TAS above).

More information on setting up your Y: Drive is available in our
Knowledge Base
or you may contact the Help Desk at 282-HELP for assistance.

If DocMan access is listed (D+) the account
has access to departmental or application share listed. (See DocMan
above).

When to Take Action

If any one of the following situations listed below exist please contact the ISU Helpdesk
to have them correct the access. Sending an Email to the ISU Helpdesk, noting changes, is
the preferred method of contact. If the situation is considered critical please contact the
ISU Helpdesk by phone at 282-HELP.

If a person has left the employment of the university.

If a person has transferred to another department within the university and is listed as having
Shared (+) access. Please identify the new department, if possible.

If an account has unnecessary access to one of the computer services defined above. This may occur when a departmental,
generic, or work study type account has FS Tools, Email, Remote Access services enabled when these services are not essential
to the job.

If an account requires additional access to one of the computer services defined above.

If a person's name has changed.

If the account is about to expire but needs to be extended.

If an account has not been accessed for six months or more.In this situation the account should probably be disabled
as the account holder probably has no current requirement for a computer account. A new account could be created in the
future as needs change by simply contacting the ISU Helpdesk.